starcitizen.tools records

9 published records for vendor starcitizen.tools.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')9

The weakness classes this vendor ships most often: where to look.

Attack profile

XSS 9

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2024-36123No exploit	Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Taglinestarcitizen.tools · citizen · CWE-79 XSS	Medium5.4	—	0.4%	Jun 3, 2024
21Monitor	CVE-2025-49578No exploit	Citizen allows stored XSS in user registration date messagestarcitizen.tools · citizen · CWE-79 XSS	Medium5.4	—	0.4%	Jun 12, 2025
21Monitor	CVE-2025-49576No exploit	Citizen allows stored XSS in search no result messagesstarcitizen.tools · citizen · CWE-79 XSS	Medium5.4	—	0.4%	Jun 12, 2025
21Monitor	CVE-2025-49577No exploit	Citizen allows stored XSS in preference menu headingsstarcitizen.tools · citizen · CWE-79 XSS	Medium5.4	—	0.4%	Jun 12, 2025
21Monitor	CVE-2025-49575No exploit	Citizen allows stored XSS in Command Palette tip messagesstarcitizen.tools · citizen · CWE-79 XSS	Medium5.4	—	0.4%	Jun 12, 2025
21Monitor	CVE-2025-53370No exploit	Citizen stored XSS vulnerability through short descriptionsstarcitizen.tools · citizen · CWE-79 XSS	Medium5.4	—	0.3%	Jul 3, 2025
21Monitor	CVE-2025-53368No exploit	Citizen is vulnerable to stored XSS attack in the legacy search barstarcitizen.tools · citizen · CWE-79 XSS	Medium5.4	—	0.3%	Jul 3, 2025
19Monitor	CVE-2024-47536No exploit	starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" fieldstarcitizen.tools · citizen · CWE-79 XSS	Medium4.8	—	0.4%	Sep 30, 2024
19Monitor	CVE-2025-49579No exploit	Citizen allows stored XSS in menu heading messagestarcitizen.tools · citizen · CWE-79 XSS	Medium4.8	—	0.4%	Jun 12, 2025

CVE-2024-36123
21Monitor
Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline
MediumCVSS 5.4No exploitEPSS 0%
- XSS
starcitizen.tools · citizenJun 3, 2024
CVE-2025-49578
21Monitor
Citizen allows stored XSS in user registration date message
MediumCVSS 5.4No exploitEPSS 0%
- XSS
starcitizen.tools · citizenJun 12, 2025
CVE-2025-49576
21Monitor
Citizen allows stored XSS in search no result messages
MediumCVSS 5.4No exploitEPSS 0%
- XSS
starcitizen.tools · citizenJun 12, 2025
CVE-2025-49577
21Monitor
Citizen allows stored XSS in preference menu headings
MediumCVSS 5.4No exploitEPSS 0%
- XSS
starcitizen.tools · citizenJun 12, 2025
CVE-2025-49575
21Monitor
Citizen allows stored XSS in Command Palette tip messages
MediumCVSS 5.4No exploitEPSS 0%
- XSS
starcitizen.tools · citizenJun 12, 2025
CVE-2025-53370
21Monitor
Citizen stored XSS vulnerability through short descriptions
MediumCVSS 5.4No exploitEPSS 0%
- XSS
starcitizen.tools · citizenJul 3, 2025
CVE-2025-53368
21Monitor
Citizen is vulnerable to stored XSS attack in the legacy search bar
MediumCVSS 5.4No exploitEPSS 0%
- XSS
starcitizen.tools · citizenJul 3, 2025
CVE-2024-47536
19Monitor
starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
MediumCVSS 4.8No exploitEPSS 0%
- XSS
starcitizen.tools · citizenSep 30, 2024
CVE-2025-49579
19Monitor
Citizen allows stored XSS in menu heading message
MediumCVSS 4.8No exploitEPSS 0%
- XSS
starcitizen.tools · citizenJun 12, 2025